feat: add otp secret persister

backend/persistence/models/user.go

@@ -20,6 +20,7 @@ type User struct {
 	CreatedAt           time.Time           `db:"created_at" json:"created_at"`
 	UpdatedAt           time.Time           `db:"updated_at" json:"updated_at"`
 	Username            *Username           `has_one:"username" json:"username,omitempty"`
+	OTPSecret           *OTPSecret          `has_one:"otp_secret" json:"-"`
 	PasswordCredential  *PasswordCredential `has_one:"password_credentials" json:"-"`
 }
 

backend/persistence/otp_secret_persister.go

@@ -0,0 +1,56 @@
+package persistence
+
+import (
+	"fmt"
+	"github.com/gobuffalo/pop/v6"
+	"github.com/teamhanko/hanko/backend/persistence/models"
+)
+
+type OTPSecretPersister interface {
+	Create(models.OTPSecret) error
+	Update(*models.OTPSecret) error
+	Delete(*models.OTPSecret) error
+}
+
+type otpSecretPersister struct {
+	db *pop.Connection
+}
+
+func NewOTPSecretPersister(db *pop.Connection) OTPSecretPersister {
+	return &otpSecretPersister{db: db}
+}
+
+func (p *otpSecretPersister) Create(secret models.OTPSecret) error {
+	vErr, err := p.db.ValidateAndCreate(&secret)
+	if err != nil {
+		return fmt.Errorf("failed to store otp secret credential: %w", err)
+	}
+
+	if vErr != nil && vErr.HasAny() {
+		return fmt.Errorf("otp secret object validation failed: %w", vErr)
+	}
+
+	return nil
+}
+
+func (p *otpSecretPersister) Update(secret *models.OTPSecret) error {
+	vErr, err := p.db.ValidateAndUpdate(secret)
+	if err != nil {
+		return fmt.Errorf("failed to update otp secret: %w", err)
+	}
+
+	if vErr != nil && vErr.HasAny() {
+		return fmt.Errorf("otp secret object validation failed: %w", vErr)
+	}
+
+	return nil
+}
+
+func (p *otpSecretPersister) Delete(secret *models.OTPSecret) error {
+	err := p.db.Destroy(secret)
+	if err != nil {
+		return fmt.Errorf("failed to delete otp secret: %w", err)
+	}
+
+	return nil
+}

backend/persistence/persister.go

@@ -163,6 +163,14 @@ func (p *persister) GetUsernamePersisterWithConnection(tx *pop.Connection) Usern
 	return NewUsernamePersister(tx)
 }
 
+func (p *persister) GetOTPSecretPersister() OTPSecretPersister {
+	return NewOTPSecretPersister(p.DB)
+}
+
+func (p *persister) GetOTPSecretPersisterWithConnection(tx *pop.Connection) OTPSecretPersister {
+	return NewOTPSecretPersister(tx)
+}
+
 func (p *persister) GetWebauthnCredentialPersister() WebauthnCredentialPersister {
 	return NewWebauthnCredentialPersister(p.DB)
 }

backend/persistence/user_persister.go

@@ -40,7 +40,9 @@ func (p *userPersister) Get(id uuid.UUID) (*models.User, error) {
 		"WebauthnCredentials",
 		"WebauthnCredentials.Transports",
 		"Username",
-		"PasswordCredential"}
+		"PasswordCredential",
+		"OTPSecret",
+	}
 
 	err := p.db.EagerPreload(eagerPreloadFields...).Find(&user, id)
 	if err != nil && errors.Is(err, sql.ErrNoRows) {